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CLAIMS 

What is claimed is: 



1 1 . A system to uniquely identify a security device, the security device coupled 

2 to a computing device, the computing device coupled to a server over a computer network, 

3 the system comprising: 

4 a security device coupled to the computing device, the security device storing a 

5 serial number associated with the security device and a user key associated with the serial 

6 number; 

7 a server coupled to a user information database, the user information database 



\}i 8 storing a plurality of registered serial numbers and a plurality of user keys, each user key 
rfi 9 being associated with one of the plurality of registered serial numbers; 



1 0 wherein, when the computing device attempts to log onto the server over the 

I" 1 1 computer network, the server: 

S3 

12 requests a serial number from the security device; 

13 verifies whether the serial number received from the security device is 

14 stored as one of the plurality of registered serial numbers in the user information database; 

1 5 if the serial number is stored within the user information database, the 

16 server obtains the associated user key and computes a challenge and computes an expected 

17 response based on the associated user key, the server sends the challenge to the security 

1 8 device over the computer network; and 
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19 if the server receives a response back from the security device in 

20 response to the challenge that matches the expected response, the server allows the 

2 1 computing device to log onto the server. 

1 2. The system of claim 1 ? wherein the serial number and the user key are 

2 sealed in a secure memory of the security device. 

1 3 . The system of claim 1 , wherein the security device further comprises a 

2 microprocessor and a security device memory. 

1 4. The system of claim 1, wherein the expected response computed at the 

!■* 2 server and the response computed at the security device, are both based on a one-way 

□ 3 hashing function of the user key and the challenge. 

(ft 1 5. The system of claim 1 , wherein the server updates the current date at the 

m 2 security device and updates an expiration date at the security device. 

1 6. The system of claim 1, wherein the server unlocks a security device 

fZ 2 memory of the security device. 

1 y 1 7. The system of claim 6, wherein unlocking the security device memory of 



2 the security device includes the server computing a memory unlock message based upon a 

3 memory key associated with the serial number of the security device stored at the server, 

4 sending the memory unlock message to the security device, and if the security device 

5 verifies the memory unlock message as being valid, the security device unlocks the 

6 security device memory. 

1 8. The system of claim 7, wherein the server locks the security device memory 

2 by sending a memory lock command to the security device. 
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1 9. The system of claim 1, wherein the server encrypts an asset with an asset 

2 key and sends the encrypted asset to the computing device, the computing device storing 

3 the encrypted asset. 

1 1 0. The system of claim 9, wherein the server encrypts the asset key with the 

2 user key and sends the encrypted asset key to the computing device, the computing device 

3 storing the encrypted asset key. 

1 11. The system of claim 10, wherein encrypting the asset key with the user key 

2 further comprises encrypting a rental flag identifying whether the associated asset is to be 

3 rented or purchased. 

1 12. The system of claim 10, wherein the security device decrypts the asset key 

2 that is encrypted with the user key using the user key stored by the security device. 

1 13. The system of claim 12, wherein the security device transmits the decrypted 

2 asset key to the computing device such that the computing device uses the decrypted asset 

3 key to decrypt the asset. 

1 14. A method to uniquely identify a security device, the security device coupled 

2 to a computing device, the computing device coupled to a server over a computer network, 

3 the method comprising: 

4 storing a serial number associated with the security device and a user key 

5 associated with the serial number at the security device; 

6 storing a plurality of registered serial numbers and a plurality of user keys at the 

7 server, each user key being associated with one of the plurality of registered serial 

8 numbers; 
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9 


requesting a serial number from the security device when the computing device 




i n 


att^mr\tc tn in a nntn the server over the computer network; 




11 


,,™.tv * „ ttzVi^+Vi^t- tUo c^fioi rMiml^pr rprpivpH frnm thp <?ecuritv device is stored as 
veritying wnetner tne serial nuniDci ic^civcu iiuni mw ow^luhj ^viw ^wivu w.^ 




12 


one of the plurality of registered serial numbers at the server; 




13 


if the serial number is stored at the server, 




14 


obtaining the associated user key from the server; 




15 


computing a challenge; 




16 


computing an expected, response oaseu on me asbuuiaicu. u&ci jvc^, 


ri 


17 


sending the challenge to the security device over the computer 




18 


network; and 


Q 


19 


if the server receives a response back from the security 


5& 


20 


device in response to the challenge that matches the expected 


: 

fl 


21 
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1 


1 5 . The method of claim 1 4, wherein the serial number and the user key are 




2 


sealed in a secure memory 01 tne security cievi^e. 




1 


16. The method of claim 14, wherein the security device comprises a 




2 


microprocessor and a security device memory. 




i 

1 


17. The method of claim 14, wherein the expected response is computed at the 




2 


server and the response is computed at the security device, both the response and the 




3 


expected response being based on a one-way hashing function of the user key and the 




4 


challenge. 
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1 18. The method of claim 14, further comprising updating the current date and 

2 an expiration date at the security device. 

1 19. The method of claim 14, further comprising unlocking a security device 

2 memory of the security device. 

1 20. The method of claim 19, wherein unlocking the security device memory of 



2 the security device includes computing a memory unlock message based upon a memory 

3 key associated with the security device, sending the memory unlock message to the 

4 security device, and if the security device verifies the memory unlock message as being 
1= * 5 valid, unlocking the security device memory. 



1 21. The method of claim 20, further comprising locking the security device 

2 memory by sending a memory lock command to the security device. 

1 22. The method of claim 14, further comprising encrypting an asset with an 

2 asset key and sending the encrypted asset to the computing device, the computing device 

3 storing the encrypted asset. 

1 23. The method of claim 22, wherein the asset key is encrypted with the user 

2 key and the encrypted asset key is sent to the computing device, the computing device 

3 storing the encrypted asset key. 

1 24. The method of claim 23, wherein encrypting the asset key with the user key 

2 further comprises encrypting a rental flag identifying whether the associated asset is to be 

3 rented or purchased. 

1 25. The method of claim 23, wherein the security device decrypts the asset key 

2 that is encrypted with the user key using the user key stored by the security device. 
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1 26. The method of claim 25, wherein the security device transmits the 

2 decrypted asset key to the computing device such that the computing device uses the 

3 decrypted asset key to decrypt the asset. 

1 27. A security device to uniquely identify and authenticate a user, the security 



2 device coupled to a computing device, the computing device coupled to a server over a 

3 computer network, the server coupled to a user information database, the user information 

4 database storing a plurality of registered serial numbers and a plurality of user keys, each 

5 user key being associated with one of the plurality of registered serial numbers, the 

6 security device comprising: 

7 a microprocessor; and 

8 a security device memory, the security device memory storing a serial number 

9 associated with the security device and a user key associated with the serial number; 

1 0 wherein, when the computing device attempts to log onto the server over the 

1 1 computer network, the microprocessor operating in conjunction with the security device 

12 memory to: 

13 in response to a request from the sever, transmit the serial number to the 

14 computing device which is then transmitted to the server; 

15 in response to a challenge from the server, compute a response based upon 

16 the user key; and 

17 transmit the response to the computing device which is then transmitted to 

18 the server. 
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1 28. The security device of claim 27, wherein the serial number and the user key 

2 are sealed in a secure memory of the security device. 

1 29. The security device of claim 27, wherein the response computed at the 

2 security device is based on a one-way hashing function of the user key and the challenge. 

1 30. The security device of claim 27, wherein the server encrypts an asset with 



2 an asset key and sends the encrypted asset to the computing device, the computing device 

3 storing the encrypted asset, and further the server encrypts the asset key with the user key 

4 and sends the encrypted asset key to the computing device, the computing device 

5 transmitting the encrypted asset key to the security device. 

1 31. The security device of claim 30, wherein the microprocessor operating in 

2 conjunction with the security device memory decrypts the asset key that is encrypted with 

3 the user key using the user key stored in the security device memory. 

1 32. The security device of claim 3 1 , further comprising transmitting the 

2 decrypted asset key to the computing device such that the computing device uses the 

3 decrypted asset key to decrypt the asset. 

1 33. A system to uniquely identify a security device, the security device coupled 

2 to a computing device, the computing device coupled to a server over a computer network, 

3 the system comprising: 

4 a security device coupled to the computing device, the security device storing a 

5 unique identifier associated with the security device and a user key associated with the 

6 unique identifier; 
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7 a server coupled to a user information database, the user information database 

8 storing a plurality of registered unique identifiers and a plurality of user keys, each user 

9 key being associated with one of the plurality of registered unique identifiers; 

10 wherein, when the computing device attempts to log onto the server over the 

1 1 computer network, the server: 

12 requests a unique identifier from the security device; 

1 3 verifies whether the unique identifier received from the security device is 

14 stored as one of the plurality of registered unique identifiers in the user information 
■!■■* 15 database; 

; J1 16 if the unique identifier is stored within the user information database, the 

r *S 

ff! 1 7 server obtains the associated user key and computes a challenge and computes an expected 

m 1 8 response based on the associated user key, the server sends the challenge to the security 

i; 5 1 9 device over the computer network; and 

i .. 

m 20 if the server receives a response back from the security device in 

::f! 21 response to the challenge that matches the expected response, the server allows the 

22 computing device to log onto the server. 

1 34. The system of claim 33, wherein the unique identifier and the user key are 

2 sealed in a secure memory of the security device. 

1 35. The system of claim 34, wherein the unique identifier is a serial number. 

1 36. The system of claim 33, wherein the security device further comprises a 

2 microprocessor and a security device memory. 
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1 37. The system of claim 33, wherein the expected response computed at the 

2 server and the response computed at the security device, are both based on a one-way 

3 hashing function of the user key and the challenge. 

1 38. The system of claim 33, wherein the server updates the current date at the 

2 security device and updates an expiration date at the security device. 

1 39. The system of claim 33, wherein the server unlocks a security device 

2 memory of the security device. 

1 40. The system of claim 39, wherein unlocking the security device memory of 



2 the security device includes the server computing a memory unlock message based upon a 

3 memory key associated with the unique identifier of the security device stored at the 

4 server, sending the memory unlock message to the security device, and if the security 

5 device verifies the memory unlock message as being valid, the security device unlocks the 



.=! 6 security device memory. 

;^ 1 41 . The system of claim 40, wherein the server locks the security device 

jij*! 2 memory by sending a memory lock command to the security device. 

1 42. The system of claim 33, wherein the server encrypts an asset with an asset 

2 key and sends the encrypted asset to the computing device, the computing device storing 

3 the encrypted asset. 

1 43. The system of claim 42, wherein the server encrypts the asset key with the 

2 user key and sends the encrypted asset key to the computing device, the computing device 

3 storing the encrypted asset key. 
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44. The system of claim 43, wherein encrypting the asset key with the user key 
further comprises encrypting a rental flag identifying whether the associated asset is to be 
rented or purchased. 

45. The system of claim 43, wherein the security device decrypts the asset key 
that is encrypted with the user key using the user key stored by the security device. 

46. The system of claim 45, wherein the security device transmits the decrypted 
asset key to the computing device such that the computing device uses the decrypted asset 
key to decrypt the asset. 
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